Appln. No. 10/585,101 

Amdt. dated September 9, 2009 

Reply to Office action of June 9, 2009 



Amendments to the Claims : 

This listing of the claims will replace all prior versions, and listings, of 
claims in the application: 
Listing of Claims : 

1 . (Previously Presented) A method for determining the operational 
characteristics of a program, comprising a verification procedure comprising the 
following steps: 

- a first step comprising: 

expressing the operational characteristics of the program as functions 
dealing with occurrences or sequences of occurrences of events 
occurring during executions of the program, said events being able to 
deal with particular operations, particular values of data, at particular 
program points and in particular states of the program; 

■ determining a level of precision with which these characteristics must 
be determined; 

■ determining a set of particular contexts of execution in which the 
program will always be executed; and 

■ determining operational specificities of a set of platforms on which the 
program will be executed; 

- a second step of estimation, by program analysis, and in consideration of 
said level of precision, of said set of particular contexts of execution and of said 
operational specificities of platforms, of information relating to a structure of the 
program, execution paths of the program and to values of data, at various points of 
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the execution paths and under different execution conditions, of states of the 
program and data handled by the program; and 

- a third step for determining said operational characteristics, by means of the 
information extracted by said program analysis, by computation of said functions on 
the occurrences or particular sequences of occurrences of particular operations, 
dealing with particular values, at particular points of the program, in particular states 
of the program, for the set of execution paths determined by analysis. 

2. (Previously Presented) The method according to claim 1 , wherein, 
in the case when the program is interactive and may depend on an undetermined 
number of dynamic values resulting from this interaction, the contexts of execution 
are given by a description abstracted from series of data representing said dynamic 
values. 

3. (Previously Presented) The method according to claim 1 , wherein, 
in the case where the program is inserted into a framework of execution, said second 
step of estimation comprises static analysis which also take into account the 
semantics of this framework of execution, including implicit interaction loops of the 
program. 

4. (Currently Amended) The method according to claim 1 , wherein 
certain of said particular operations, which form events, accompanied by constraints 
on the values handled, the execution points, and the statuses states of the program, 
are defined as one of the following actions: call to a given routine, access to a given 
variable, reading or writing on a given port, computation of a given arithmetic 
expression, completion of execution of the program or of a routine on a normal return 
or ending an exception. 
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5. (Previously Presented) The method according to claim 3, wherein 
certain of said static analysis consist of abstract interpretations of the program, on 
abstract domains which may notably represent sets of values and symbolic 
expressions. 

6. (Currently Amended) The method as claimed in claim 1 , wherein 
said extracted information are represented by means of one or more of the following 
structures: status state graph of the program, inheritance graph, graph of the routine 
calls of the program, control flow chart of each routine of the program, structure of 
loops and catch-up of exceptions, structure of basic blocks, abstraction of the status 
state of the program at an execution point. 

7. (Previously Presented) The method according to claim 1 , wherein 
said extraction of information does not apply to unnecessary information for 
determining the operational characteristics, both from the viewpoint of the amount of 
information extracted and from the precision of these pieces of information. 

8. (Previously Presented) The method according to claim 1 , wherein 
only major pieces of information among said extracted information are computed and 
saved and in that the other pieces of information are only computed when necessary 
for determining said operational characteristics. 

9. (Previously Presented) The method according to claim 8, wherein 
the major pieces of information are information extracted at breakdown nodes of the 
code of routines in a graph of basic blocks and in that the other pieces of 
information, in the body of the basic blocks, are recomputed by local analysis from 
information saved at the start and end of the corresponding block. 
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10. (Previously Presented) The method according to claim 1 , wherein 
said operational characteristics represent validity criteria and in that said 
determination establishes that the program is valid, because it observes each of said 
criteria, or invalid, because at least one of said criteria cannot be observed. 

1 1 . (Previously Presented) The method according to claim 10, 
wherein said validity criteria express security or interoperability rules. 

12. (Previously Presented) The method according to claim 1 , wherein 
said operational characteristics characterise resources which are consumed and 
functionalities which are exploited by the program during its execution and in that 
said determination provides an execution profile of the program. 

13. (Previously Presented) The method according to claim 3, wherein 
a computation of certain of said functions associated with the operational 
characteristics is performed during said static program analysis, as soon as certain 
of said pieces of information are extracted. 

14. (Previously Presented) The method according to claim 10 for 
automatic filtering of a set of programs relative to a given set of validity criteria, 
wherein the extraction of information by static program analysis is only completed 
once per program and reused whenever necessary for determining whether the 
program observes said set of validity criteria. 

1 5. (Previously Presented) A method for distribution of applications 
ensuring that the applications observe validity criteria associated with the execution 
platforms of these applications, comprising filtering step such that, for any client 
desiring to accede to the applications for a certain execution platform, the 
applications are filtered by a verification procedure in accordance with the method 
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according to any one of claims 1 to 12, only the applications which observe the 
validity criteria for said platform being presented to the client. 

16. (Currently Amended) A system for multi-application execution of 
the method for determining the operational characteristics of a program of claim 1 , 
for ensuring that the applications observe given validity criteria, the system 
comprising: 

- an application analysis server, a server for validation of applications and a 
multi-application platform, and 

- means for ensuring, prior to loading or execution of an application on the 
platform: 

- observance by this application of said validity criteria^, an 
extraction of information being carried out on the application analysis 
server and an evaluation of said validity criteria being carried out on the 
server for validation of applications, and 

- in the case when one of the validity criteria cannot be 
observed, a failure of loading or execution of the application, a change 
of the status state of the system and an emission of a sound or visual 
signal to alert of failure of loading or executionT 

tho moans for onsur i ng obsorvanco by sa i d appl i cat i on of said 
va li d i ty cr i ter i a oxocut i ng a procoduro compr i s i ng tho fo ll ow i ng stops: 

- a f i rst stop comprising: 

* oxpross i ng tho va li d i ty cr i tor i a of tho program as funct i ons 

dealing w i th occurronoos or soquonoos of ooourronoos of ovonts r 
occurr i ng dur i ng oxoout i ons of tho program, sa i d ovonts be i ng ab l e to 
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doal with part i cular operat i ons, particu l ar va l ues of data, at particu l ar 
program po i nts and i n part i cu l ar states of tho program; 

* determ i n i ng a l evel of prec i s i on with wh i ch those val i d i ty 

cr i ter i a must bo determ i ned; 

* determ i ning a set of part i cu l ar contexts of execut i on i n 

wh i ch the program w ill a l ways be executed; 

* determ i n i ng operat i ona l spec i f i c i ties of a set of p l atforms on 

wh i ch the program w i l l be executed; 

- a second stop of est i mat i on, by program ana l ys i s, and i n 
cons i deration of sa i d l eve l of precision, of sa i d poss i b l e set of particu l ar 
contexts of execut i on and of sa i d operat i ona l spec i f i c i t i es of p l atforms, 
of i nformation re l at i ng to structure of the program, execution paths of 
tho program and to tho va l ues of poss i b l e data, at various po i nts of tho 
execut i on paths and undor d i fferent execut i on cond i t i ons, of states of 
the program and data hand l ed by the program; 

- a th i rd step for determ i n i ng sa i d va li d i ty cr i ter i a, by means of 
the i nformat i on extracted by sa i d program ana l ysis, by computat i on of 
sa i d funct i ons on tho occurrences or particu l ar sequences of 
occurrences of part i cular operat i ons, dea l ing w i th particu l ar va l ues, at 
part i cu l ar po i nts of tho program, i n part i cu l ar states of tho program, for 
the set of execut i on paths determined by analys i s . 

17. (Previously Presented) The system according to claim 16, 
wherein the server for validation of applications is executed on the multi-application 
platform, the application analysis server executing outside the platform. 
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18. (Previously Presented) The system according to claim 16, 
wherein the application analysis server and the server for validation of applications 
are executed on the multi-application platform. 

19. (New) A system for multi-application execution of the method for 
determining the operational characteristics of a program of claim 1, for ensuring that 
the applications observe given validity criteria, the system comprising: 

- an application analysis server, a server for validation of applications 
and a multi-application platform, and 

- means for ensuring, prior to loading or execution of an application on 

the platform: 

- observance by this application of said validity criteria, an extraction of 
information being carried out on the application analysis server and an 
evaluation of said validity criteria being carried out on the server for 
validation of applications, and 

- in the case when one of the validity criteria cannot be observed, a 
failure of loading or execution of the application, a change of the status 
state of the system and an emission of a sound or visual signal to alert 
of failure of loading or execution, 

the mean for insuring observance by said application of said validity 
criteria executing a procedure comprising the following steps: 

- a first step comprising: 

■ expressing the validity criteria of the program as functions 
dealing with occurrences or sequences of occurrences of 
events which occurring during executions of the program, 
said events being able to deal with particular operations, 
particular values of data, at particular program points and in 
particular states of the program; 

■ determining a level of precision with which these validity 
criteria must be determined; 

■ determining a set of particular contexts of execution in 
which the program will always be executed; 
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■ determining operational specificities of a set of platforms on 
which the program will be executed; 

- a second step of estimation, by program analysis, and in 
consideration of said level of precision, of said set of particular contexts 
of execution and of said operational specificities of platforms, of 
information relating to a structure of the program, execution paths of 
the program and to the values of data, at various points of the 
execution paths and under different execution conditions, of the states 
of the program and data handled by the program; 

- a third step for determining said validity criteria, by means of the 
information extracted by said program analysis, by computation of said 
functions on the occurrences or particular sequences of occurrences of 
particular operations, dealing with particular values, at particular points 
of the program, in particular states of the program, for the set of 
execution paths determined by analysis. 
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